PT-2023-24094 · Gpac+1 · Gpac+1

Publicado 2018-12-19 · Atualizado 2024-02-09 · CVE-2023-3291

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions gpac/gpac versions prior to 2.2.2

Description A Heap-based Buffer Overflow issue has been identified. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue.

Exploit

Correção

Memory Corruption

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-787

CWE-122

Identificadores relacionados

ALT-PU-2018-2923

CVE-2023-3291

DSA-5452-1

MGASA-2024-0027

Produtos afetados

Alt Linux

Gpac

Referências · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3291.json · Exploit
• 🔥 https://huntr.dev/bounties/526954e6-8683-4697-bfa2-886c3204a1d5 · Exploit
• https://github.com/gpac/gpac/commit/6a748ccc3f76ff10e3ae43014967ea4b0c088aaf · Aviso do Fabricante
• https://t.me/cvenotify/54440 · Publicação no Telegram
• https://t.me/cibsecurity/65292 · Publicação no Telegram
• https://debian.org/security/2023/dsa-5452 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2024-0027 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-3291 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2024-0027.html · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-3291 · Nota de Segurança
• https://osv.dev/vulnerability/DSA-5452-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-3291 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-3291 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-3291 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2023-3291 · Nota de Segurança